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(54) Secured portable electronic device 

(57) The present invention is provided with a base 
board (2) on which wiring is provided, a memory (4), in- 
stalled on the base board (2) by soldering, for storing 
data and a certification key, and a memory control LSI 
(3). The memory control LSI is a fabricated as a bare 
chip incorporating an internal memory (3b) for storing 
data and a certification key, and a control section (3a) 
for controlling the storing of data in the memory (4) and 



the reproduction of the data from the memory (4). The 
bare chip is installed on the base board (2) and covered 
with sealing resin. The bare chip is connected to the 
base board (2) by gold wire bonding. The certification 
key stored in the memory (4) is compared with the cer- 
tification key stored in the internal memory. Based on 
the coincidence or non-coincidence between these 
keys, the control section determines whether or not the 
memory (4) is an intended one. 
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Description 

[0001] The present invention relates to a portable 
electronic medium which functions as a memory card, 
and in which a memory for storing data and a control 
circuit for controlling the memory are Independently In- 
stalled on the same card. 

[0002] Where a memory for storing data and a control 
circuit (a control LSI) for controlling the memory are in- 
dependently installed on the same card (a base board), 
it is general that they are soldered to the base board. 
[0003] Owing to this structure, the memory can be 
easily replaced with a new one, and the control LSI can 
be detached for analysis. 

[0004] In other words, a counterfeit can be made by 
merely replacing only the memory with another, or by 
increasing the storage capacity. 
[0005] The present invention has been made in con- 
sideration of the above circumstances, and is intended 
to prevent th e installation of a memory that does not cor- 
respond to the control circuit in use, thereby preventing 
fabrication of a counterfeit employing such a memory. 
[0006] The present invention is also intended to pre- 
vent easy analysis of the control circuit in use. 
[0007] According to the present Invention, there is 
provided a portable electronic medium comprising: 
a base board on which wiring is provided; a first memory, 
installed on the base board, for storing data and a first 
certification key; and a control circuit including: a second 
memory for storing data and a second certification key; 
and a control section for controlling an operation of stor- 
ing data in the first memory and an operation of reading 
the data from the first memory, the second memory and 
the control section being fabricated as a chip which is 
installed on the base board and connected to the base 
board, the control section checking whether the first cer- 
tification key stored in the first memory coincides with 
the second certification key stored in the second mem- 
ory, thereby determining whether or not the first memory 
is an intended one. 

[0008] According to the present invention, there is al- 
so provided a portable electronic medium comprising: a 
base board on which wiring is provided; a first memory, 
installed on the base board, for storing data; and a con- 
trol circuit including: a second memory for storing data 
and a first-memory-state information; and a control sec- 
tion for controlling an operation of storing data in the first 
memory and an operation of reading the data from the 
first memory, the second memory and the control sec- 
tion being fabricated as a chip which is installed on the 
base board and connected to the base board, the control 
section checking whether the first memory is in a state 
coinciding with first-memory-state information stored in 
the second memory, thereby determining whether or not 
the first memory is an intended one. 
[0009] According to the present invention, there is fur- 
ther provided a portable electronic medium comprising: 
a base board on which wiring is provided; a first memory, 



installed on the base board, for storing data and encod- 
ed data obtained by encoding a first certification key; 
and a control circuit including: a second memory for stor- 
ing data, a second certification key, an encoding key, 

5 and a decoding program; and a control section for con- 
trolling an operation of storing data in the first memory 
and an operation of reproducing the data from the first 
memory, the second memory and the control section be- 
ing fabricated as a chip which is installed on the base 

10 board and connected to the base board, the control sec- 
tion decoding the encoded data stored in the first mem- 
ory by use of the encoding key and decoding program 
stored in the second memory, and further checking 
whether a resultant certification key coincides with the 

1$ certification key stored in the second memory, thereby 
determining whether or not the first memory is an intend- 
ed one. 

[0010] This summary of the invention does not nec- 
essarily describe all necessary features so that the in- 
20 vention may also be a sub-combination of these de- 
scribed features. 

[0011] The invention can be more fully understood 
from the following detailed description when taken in 
conjunction with the accompanying drawings, in which: 

25 

FIG. 1 shows the internal structure of a memory 

card according to the present invention. 

FIG. 2 shows the internal structure of the memory 

card. 

30 FIG. 3 shows a sectional structure of the memory 

card. 

FIG. 4 shows the internal structure of the memory 
card. 

FIG. 5 is a control block diagram of the memory 
35 card. 

FIG. 6 shows an example of a manner in which a 
certification key is stored according to the first em- 
bodiment. 

FIG. 7 is a flow chart illustrating the processing that 
40 is performed when the memory card of the first em- 
bodiment is actuated or when power supply voltage 
is applied. 

FIG. B shows an example of a manner in which a 
certification key is stored according to the first em- 
45 bodiment. 

FIG. 9 shows an example of a manner in which 
memory state information are stored according to 
the second embodiment. 

FIG. 10 is a flowchart illustrating how certification 
so processing is performed according to the second 
embodiment. 

FIG. 11 shows how music information edited at the 
end of the last-time processing is stored in the mem- 
ory of the memory card according to the second em- 
55 bodiment. 

FIG. 1 2 is a flowchart illustrating how memory state 
information are stored and certification processing 
is performed according to the second embodiment. 
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FIG. 13 shows how memory state information are 
stored in an internal memory according to the sec- 
ond embodiment. 

FIG. 14 shows how encoded data, a certification 
key, an encoding key and a decoding program are * 
stored according to the third embodiment. 
FIG. 15 is a flowchart illustrating how certification 
processing is performed according to the third em- 
bodiment. 

FIG. 1 6 shows how encoded data, a certification 10 
key, an encoding key and a decoding program are 
stored according to the third embodiment. 
FIG. 1 7 shows how encoded data, a certification 
key, an encoding key, a decoding program and an 
encoding program are stored according to the « 
fourth embodiment. 

FIG. 18 is a flowchart illustrating how certification 
processing is performed according to the fourth em- 
bodiment. 

FIG. 1 9 shows how encoded data, a certification 20 
key, an encoding key, a decoding program and an 
encoding program are stored according to the 
fourth embodiment. 

FIG. 20 shows the entire Internet connection sys- 
tem according to the fifth embodiment. 25 
FIG. 21 illustrates how the Internet connection sys- 
tem of the fifth embodiment is used in a volume- 
sales store so as to register Internet connection in- 
formation in a memory card. 

30 

[0012] Embodiments of the present invention will now 
be described. 

[0013] FIGS. 1 to 3 show the structure of a memory 
card M (an SD card), which is an example of a portable 
electronic medium. FIG. 1 shows the Internal structure 35 
of the memory card M according to the present inven- 
tion, FIG. 2 also shows the internal structure of the mem- 
ory card M, and FIG. 3 shows a sectional structure of 
the memory card. 

[0014] The memory card M comprises a base board <o 
2 provided with external connection terminals 1 . 
A memory control LSI (a control circuit, a controller) 3, 
a memory (an external memory, a first memory) 4, chip 
components 5, and ICs of other types are installed on 
the base board 2. As shown in FIG. 4, the memory card 45 
is received in a case 7. 

[0015] The external connection terminals 1 of the 
base board 2 are coated with a hard gold plating layer, 
so as to improve the contact-resistant characteristic. 
[001 6] The base board is coated with a soft gold plat- so 
ing layer on the surface 2a that is reverse to the surface 
where the external connection terminals 1 are provided. 
[0017] On surface 2a, the memory control LSI 3 
(which is a bare chip for memory control) is die-bonded. 
The base memory control LSI 3 is connected to the base & 
board by gold wire bonding and is covered with sealing 
resin 8. Thereafter, the memory 4, which is of a TSOP 
lype, the chip components 5 and the ICs are installed 



by soldering. 

[0018] Since the memory control LSI 3 is installed on 
the base board 2 by bare chip installation, the key data 

cannot be easily analyzed. 

[0019] The control circuit of the memory card M will 
be described with reference to FIG. 5. 
[0020] As shown in FIG. 5, the memory card M is 
made up of: external connection terminals 1 through 
which data are exchanged with reference to an external 
apparatus (not shown); an interface section 9 connected 
to the external connection terminals 1 ; a memory control 
LSI 3 connected to the interface section 9; and the mem- 
ory 4, connected to the memory control LSI 3, for con- 
trolling the storing/reproduction of data. The interface 
section 9 is made of chip components 5 and ICs 6. 
[0021] The memory control LSI 3 includes a control 
section 3a for controlling the entire memory, and an in- 
ternal memory (a second memory) 3b for storing a con- 
trol program and data. 

[0022] When the memory card M is connected to the 
external apparatus (not shown), power supply voltage 
is applied thereto. 

[First Embodiment] 

[0023] A description will be given of an embodiment 
wherein the memory 4 is certified by use of the certifi- 
cation key unalterably stored in the internal memory 3b 
and the certification key unalterably stored in the mem- 
ory 4. 

[0024] A unique value serving as a certification key is 
stored in the internal memory 3b, as shown in FIG. 6. 
The value is unalterably stored. 
[0025] Each of the memory 4 and the internal memory 
3b is made up of an unalterable ROM portion and an 
alterable ROM portion. The certification key Is stored in 
the unalterable ROM portion. 

[0026] With reference to the flowchart shown in FIG. 
7, a description will be given of the processing that is 
performed when the memory card of the first embodi- 
ment is actuated or when power supply voltage is ap- 
plied. 

[0027] First of all, the control section 3a executes a 
self check (ST 1) when the card is actuated or when a 
power supply voltage is applied from the external appa- 
ratus. If the self check shows "OK" in step (ST 2), the 
control section 3a reads out the certification key from 
the memory 4 (ST 3), and further reads out the certifi- 
cation key from the internal memory 3b (ST 4). Then, 
the control section 3a compares the two keys, for coin- 
cidence (ST 5). 

[0028] If the comparison shows that the two keys co- 
incide with each other, the control section 3a certifies 
the memory 4 (certification "OK") (ST 6). Then, the con- 
trol section 3a is set in the standby state (ST 7). 
[0029] If the self-check in step ST 2 indicates "NG" or 
if the certification of step S6 indicates "NG", the control 
section 3a stops processing (ST 8). 
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[0030] If step 2 shows that the certification is "NG", 
this means that the comparison in step 5 indicates the 
key discrepancy and the memory 4 is not the certified 
one. 

[0031] In the above, reference was made to the case 
where the memory 4 is certified when the card is actu- 
ated or when the power supply voltage is applied to the 
external apparatus. It should be noted, however, thatthe 
memory may be certified in a similar manner each time 
it is accessed. 

[0032] The memory 4 may be accessed when music 
information or a program externally supplied is stored, 
or when the music information or program stored in the 
memory 4 is reproduced or executed. 
[0033] The certification key, which is stored in the In- 
ternal memory 3b for certification of the memory 4, may 
be used for certifying the relationship between the ex- 
ternal apparatus and the card M. As shown in FIG. 8. 
moreover, the internal certification key K1 for certifying 
the memory 4 and the external certification key K2 for 
certifying the external apparatus can be stored in the 
internal memory 3b of the card M. 

[Second Embodiment] 

[0034] By use of the above structure, the memory 
control LS1 13 can store the state of the memory 4 (i.e., 
the manner of processing). When the memory 4 is ac- 
cessed next, the state information, which indicate the 
state of the memory 4, are checked to see whether or 
not they remain the same since the last-time access. 
Based on this check, the memory 4 is certified. 
[0035] In the case of the second embodiment, the 
control section 3a stores the state information on the 
memory 4 in the internal memory 3b when the process- 
ing usingthe memory card M comes to an end, as shown 
in FIG. 9. The state information on the memory 4 in- 
clude: the area used at the last processing (FAT: a file 
allocation table); a check sum of the whole of the mem- 
ory 4 (a verification value); a check sum stored in the 
memory 4 at the end of the last-time processing (a ver- 
ification value); etc. By this storing, the internal memory 
3b stores information regarding the area used at the last 
processing (FAT: a file allocation table); a check sum of 
the whole of the memory 4 (a verification value); a check 
sum stored in the memory 4 at the end of the last-time 
processing (a verification value); or the like. 
[0036] The memory 4 described above is a nonvola- 
tile memory and can retain the state In which the mem- 
ory 4 is in the last-time processing. The internal memory 
3b is also a nonvolatile memory and can hold state in- 
formation on the memory 4. 

[0037] A description will be given as to how certifica- 
tion processing is performed when the memory 4 is ac- 
cessed by use of the above structure. In the description 
below, the flowchart shown in FIG. 1 0 will be referred to. 
[0038] The memory 4 may be accessed when music 
information or a program externally supplied is stored, 



or when the music information or program stored in the 
memory 4 is reproduced or executed. 
[0039] When the memory 4 is to be accessed, the 
control section 3a checks the storing state of the mem- 

5 ory 4 (ST 1 1 ) and determines which area (FAT) was used 
in the last-time processing (ST 12). Then, the control 
section 3a compares this area (FAT), i.e., the area de- 
termined as having been used in the last-time process- 
ing, with the area (FAT) registered in the memory 3b as 

10 having been used in the last-time processing (ST 13). 
[0040] If the comparison shows that the two areas co- 
incident with each other, the control section 3a deter- 
mines that the memory 4 is certified (certification "OK") 
(ST 14). Then, the access processing to the memory 4 

15 is started (ST 15). The access processing is, for exam- 
ple, the storing (writing) of data, or the reproduction 
(reading) of stored data. 

[0041] After the execution of the access processing 
the control section 3a stores the data indicating the area 

20 (FAT) used for the access processing in the internal 
memory 3b (overwrite) (ST 16). 
[0042] If the comparison in step ST 16 indicates the 
area discrepancy, the control section 3a determines that 
the certification is "NG" and therefore ends the access 

25 processing (ST 17). 

[0043] In the above description, reference was made 
to a FAT as indicating the state information on the mem- 
ory 4. Needless to say, the check sum of the whole of 
the memory 4 (a verification value), a check sum stored 

30 in the memory 4 at the end of the last-time processing 
(a verification value) or the like may be used in a similar 
manner. 

[0044] Let us assume a case where at the end of the 
last-time processing, music information "A" are stored 
35 in address "AAAA" of the memory 4 to have length of 
n BB° t as shown in FIG. 11. A description will be given 
as to how, in this case, the processing for storing the 
memory state information and the certification process- 
ing are executed, with reference to the flowchart shown 
40 in FIG. 12. 

[0045] First of all, the control section 3a calculates a 
check sum "CC" (a verification value) corresponding to 
the music information "A" (ST 21). 
[0046] Subsequently, the control section 3a gener- 
45 ates memory state information (ST 22) by adding the 
following three to the information ID originally provided 
for the music information "A": (I) the storing start address 
"AAAA" of the memory 4; (ii) the length M BB" of the 
stored information; and (ill) the check sum a CC" (a ver- 
sa rfication value) calculated as above. The memory state 
information, thus generated, are stored in the internal 
memory 3b (ST 23), as shown in FIG. 13. 
[0047] When the memory 4 is about to be accessed 
(ST 24), the control section 3a confirms the stored state 
55 of the memory 4 (ST 25) and determines that informa- 
tion having a length of "BB were stored in 
address "AAAA" of the memory 4 at the end of the last- 
time processing (ST 26). 
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[0048J Then, the control section 3a calculates the 
check sum °CC" (a verification value) corresponding to 
the information that starts from address "AAAA" of the 
memory 4 and has a length of "BB U (ST 27). 
[0049] On thebasis of the address "AAAA",the length 5 
"BB" and the calculated check sum "CC" (a verification 
value) , the control section 3a determines memory status 
information (ST 28). The memory state information are 
compared with the memory state information read out 
from the internal memory 3b and used in the last-time 
processing so as to see whether they coincide with each 
other (ST 29). 

[0050] If the comparison indicates coincidence of in- 
formation, the control section 3a certifies the memory 4 
(certification "OK") (ST 30) and executes the accessing 
processing to the memory 4 (ST 31 ). 
[0051] If the comparison in step 29 indicates a dis- 
crepancy of information, the control section 3a deter- 
mines that the certification is "IMG" and ends the access 
processing (ST 32). 

[Third Embodiment] 

[0052] A description will now be given of an embodi- 
ment wherein the memory 4 is certified by using: encod- 
ing data for the certification key unalterably stored in the 
memory 4; the certification key unalterably stored in the 
internal memory 3b; the decoding program; and the en- 
coding key. 

[0053] in the case of this embodiment, the memory 4 
stores encoded data obtained by encoding a certifica- 
tion key by use of a unique certification key, as shown 
in FIG. 14. The encoded data are unalterably stored. 
[0054] As shown in FIG. 14, the internal memory 3b 
stores a certification key that is identical to the certifica- 
tion key used before the encoding of the encoded data 
stored in the memory, a decoding program used for de- 
coding the encoded data stored in the memory 4, and 
an encoding key used when the encoded data are de- 
coded in accordance with the decoding program. The 
keys and program are stored unalterably. 
[0055] Each of the memory 4 and the internal memory 
3b is made up of an unalterable ROM portion and an 
alterable ROM portion. The certification key is stored in 
the unalterable ROM portion. 

[0056] A description will be given, with reference to 
the flowchart shown in FIG. 15, as to how the memory 
4 is certified by use of the structure described above. 
[0057] First of all, the control section 3a reads out the 
encoded data from the memory 4 (ST 41). Then, the 
control section 3a decodes readout encoded data in ac- 
cordance with the encoding key stored in the internal 
memory 3b. For this decoding operation, the decoding 
program stored in the internal memory 3b is executed. 
As a result, a certification key is obtained (ST 42). Fur- 
ther, the control section 3a compares that certification 
key with the certification key stored in the internal mem- 
ory 3b (ST 43), for coincidence. 



[0058] If the comparison indicates coincidence be- 
tween the certification keys, the control section 3a cer- 
tifies the memory 4 (certification "OK") (ST 44). 
[0059] If the comparison in step 43 indicates a dis- 
crepancy, the control section 3a determines that the cer- 
tification is U NG" (ST 45). 

[0060] The certification key, which is stored in the in- 
ternal memory 3b for certification of the memory 4, may 
be used for certifying the relationship between the ex- 
ternal apparatus and the card M. As shown in FIG. 16, 
moreover, the internal certification key K1 for certifying 
the memory 4 and the external certification key K2 for 
certifying the external apparatus can be stored in the 
internal memory 3b of the card M. 

[Fourth Embodiment] 

[0061] A description will now be given of an embodi- 
ment wherein the memory 4 is certified by executing 
both the certification processing (steps 41-45) of the 
third embodiment and the certification processing (steps 
1 1 -1 4) of the second embodiment. The memory 4 is cer- 
tified when data are received from an external apparatus 
and stored in the memory 4. 

[0062] In thecase of the fourth embodiment, encoded 
data, which are obtained by encoding a certification key 
in accordance with a unique encoding key, are stored 
beforehand, as shown in FIG. 1 7. The encoded data are 
unalterably stored. 

[0063] As shown in FIG. 17, the internal memory 3b 
stores a certification key that is identical to the certifica- 
tion key used before the encoding of the encoded data 
stored in the memory 4, an encoding program used for 
encoding reception data received from the external ap- 
paratus, a decoding program used for decoding the en- 
coded data stored in the memory 4, and an encoding 
key used when the reception data are encoded in ac- 
cordance with the encoding program or when the en- 
coded data are decoded in accordance with the decod- 
ing program. The keys and programs are stored unal- 
terably. 

[0064] As shown in FIG. 1 7, the internal memory 3b 
information regarding the area used at the last process- 
ing (FAT: a file allocation table); a check sum of the 
whole of the memory 4 (a verification value); a check 
sum stored in the memory 4 at the end of the last-time 
processing; or the like. 

[0065] Each of the memory 4 and the internal memory 
3b is made up of an unalterable ROM portion and an 
alterable ROM portion. The certification key is stored in 
the unalterable ROM portion. The alterable ROM portion 
is a nonvolatile memory and retains the state In which 
the memory 4 is in the last-time processing. 
[0066] A description will be given, with reference to 
the flowchart shown in FIG. 18, as to how the certifica- 
tion processing is executed upon reception of data from 
the external apparatus by use of the structure described 
above. 
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[0067] Upon reception of data from the external ap- 
paratus (ST 51), the control section 3a executes the cer- 
tification processing (ST 52) according to the third em- 
bodiment, and further executes the certification 
processing (ST 53) according to the second embodi- s 
ment 

[0068] If each certification processing is "OK" (ST 54), 
the control section 3a encodes the received data (ST 
55) in accordance with the encoding key stored in the 
internal memory 3b. For this encoding operation, the en- 
coding program stored in the internal memory 3b is ex- 
ecuted. 

[0069] Then, the control section 3a stores the encod- 
ed data in the memory 4 (ST 56). 
[0070] Afterthis storing operation, the control section 
3a stores the data indicating the state of the memory 4 
in the internal memory 3b (overwrite) (ST 57). 
[0071] If either certification processing is "NG", the 
control section 3a ends the processing (ST 58). 
[0072] When the encoded data stored in the memory 
4 is decoded for reproduction, the decoding operation 
is performed in a similar manner to that described 
above. 

[0073] The data to be stored in the memory 4 may be 
music information or a program. 
[0074] The certification key, which is stored In the in- 
ternal memory 3b for certification of the memory 4, may 
be used for certifying the relationship between the ex- 
ternal apparatus and the card M. As shown in FIG. 19, 
moreover, the internal certification key K1 for certifying 
the memory 4 and the external certification key K2 for 
certifying the external apparatus can be stored in the 
internal memory 3b of the card M. 

[Fifth Embodiment] 

[0075] A description will now be given of a manner in 
which a memory card M having the certification function 
described above is used. 

[0076] By way of example, how the memory card M 
is employed in an internet connection system will be de- 
scribed with reference to FIGS. 20 and 21 . 
[0077] FIG. 20 shows the internet connection system 
to which the memory card M capable of certifying an in- 
corporated memory is applied. 
[0078] Referring to FIG. 20, each of electronic devic- 
es, such as a PC (personal computer) 11, a cellular 
phone (or a mobile phone) 1 2, an electronic camera and 
a TV (television) set 14, is provided with a card slot and 
a communication interface (not shown). The card slot is 
designed to receive a memory card M which is substan- 
tially equal in size to a postage stamp. The memory card 
M includes a hidden storage area which cannot be ex- 
ternally accessed. The communication interface is re- 
quired for connection to the Internet 1 5, etc. , and an ex- 
ample of the communication interface is a modem. 
[0079] According to the present embodiment, the 
memory 4 of the memory card M stores internet connec- 



tion information 150, including a user ID, a user pass- 
word, a mail account, a mail password, a DNS server 
address, an access point (a telephone number for ac- 
cess), etc. The data format of the Internet connection 
information 1 50 registered in the memory 4 of the mem- 
ory card M is predetermined without reference to the 
types of electronic devices (namely, the PC 11 , cellular 
phone 12, electronic camera 13 and the TV set 14 de- 
scribed above). 

[0080] When a memory card M is inserted in the card 
slot, the PC 1 1 is automatically booted up and reads out 
the Internet connection information 1 50 of the predeter- 
mined format from the memory 4 of the card M. This 
memory 4 stores an application program 110 used for 
automatic connection to the Internet 15 (i.e., an Internet 
connection setting application program 110). When the 
memory card M is actuated, the processing for certifying 
an incorporated memory, i.e., the processing described 
in relation to the first, second and third embodiments, is 
executed. When the memory certification is "OK", the 
PC 11 (i.e., an external apparatus) can be certified by 
using the certification key stored in the memory 3b of 
the memory card M. When these certifications are "OK", 
the application program is executed. 
[0081] The cellular phone 12, electronic camera 13, 
TV set 1 4 and other electronic devices are also provided 
with a storage medium that is readable by a computer. 
The storage medium stores an Internet connection set- 
ting application program (hereinafter referred to simply 
as an "application"). The storage medium is made of a 
ROM, a disk drive, a flash memory, etc. The application 
110 may be downloaded through a communication line. 
[0082] As described above, each of the electronic de- 
vices (the PC 11, the cellular phone 12, the electronic 
camera 13, etc.) is provided with an application (i.e., an 
Internet connection setting application). With this struc- 
ture, what is required of the user is merely to carry the 
memory card M, the memory 4 of which stores the In- 
ternet connection information 150, and insert it in the 
card slot of an arbitrary one of the electronic devices 
(namely, the PC 11 , the cellular phone 12, the electronic 
camera 13 or the TV set). By so doing, connection to 
the Internet 15 can be easily established. The memory 
card M is not designed to be dependent on any specific 
one of the electronic devices. In other words, the user 
can choose an electronic device to be used, and insert 
the memory card M in the card slot of the chosen device. 
By merely doing so, the user can be connected to the 
Internet through the device. 

[0083] In connection with this embodiment, a descrip- 
tion will be given of a shop that registers the Internet 
connection information 1 50 in the memory 4 of the mem- 
ory card M. A customer (i.e., the user) takes a memory 
card M to the shop or buys one from the shop. Then, the 
customer asks the shop to register the Internet connec- 
tion information in the memory 4 of the memory card M. 
In the case illustrated in FIG. 20, a volume-sales store 
1 6 and a convenience store 27 registerthe Internet con- 
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nection information. For this registration, a PC 160 in 
the volume-sales store 16 is provided with a computer- 
readable storing medium, and this storing medium 
stores information 180 used for the registration of inter- 
net connection information (i.e., an Internet connection 
information registration application program). The con- 
venience store 17 is provided with an information write 
terminal 170, and the storing medium of this terminal 
170 stores not only an application used for registering 
internet connection information in the memory 4 of the 
memory card M (i.e., an internet connection information- 
registration application) but also an application used for 
downloading digital contents to the memory card M or 
an MD (i.e., a mini-disk). 

[0084] In this manner, the volume-sales store 1 6 and 
the convenience store 17 serve as service shops that 
can register Internet connection information. Owing to 
the registration service by these shops, users (subscrib- 
ers) who made a contract with Internet providers 18 
(hereinafter referred to simply as providers) can be 
counted according to the providers 18 or the service 
shops. Each provider 1 8 can therefore give a refund 1 9 
to a system provider (i.e., a company that provides an 
Internet connection system using a portable storing me- 
dium) or the service shops (i.e., the shops that registers 
Internet connection information, such as the volume- 
sales shop 1 6 and convenience store 1 7) in accordance 
with the number of subscribers 19. 
[0085] A description will now be given as to how the 
Internet connection information registration service 
shop registers (writes) Internet connection information 
in the memory 4 of the memory card M by use of the 
system shown In FIG. 20. In the following below, FIG. 
21 will be referred to. 

[0086] When the memory card of the user is inserted 
in the card slot of the PC 160, as indicated by arrow a, 
the Internet connection information-registration applica- 
tion 1 80 is started. A list of providers (a provider list 
menu) 201 Is shown on the display unit of the PC 160. 
(The providers make a contract with the company that 
provides the system shown in FIG. 20.) 
[0087] On the provider list menu 201 , the user selects 
a provider or a salesperson of the volume-sales store 
1 6 selects one provide the provider requested by the 
user. In response to this selection, the PC 1 60 executes 
the application 180 and displays a message 202 indi- 
cating subscriber contract contents corresponding to 
Ihe selected provider. A confirmation button 202a is in- 
cluded in the menu, and when the confirmation button 
is pushed (selected), a payment method selection menu 
203 is displayed. When a payment method is selected 
on this menu, then a mall account preparation menu 204 
is displayed. After mail accounts desired by the user are 
entered, the PC 160 is connected to the server 210 of 
the provider designed by the user (the connection is es- 
tablished through the Internet). The payment method 
and mall accounts desired by the user are therefore sent 
to the server 210. A confirmation request is subsequent- 



ly made, as indicated by arrow b, and an online confir- 
mation message 205 Is displayed. 
[0088] The server 21 0 of the provider designated by 
the user checks the mail accounts desired by the user 

5 to see whether they have been already assigned to an- 
other user. This check is made in the order of the first to 
third choices. If one of the mail accounts has not yet 
been assigned, it is determined that the mail account in 
question is assigned to the user. If all mail accounts have 

10 been already been assigned, the server 210 requests 
that different mail accounts be entered from the PC 1 60 
of the volume-sales shop 1 6. 

[0089] After determining a mail account desired by the 
user and assigning it to the user, the server 21 0 deter- 

15 mines a user ID, a user password and a mail password, 
which are to be assigned to the user. The information 
on these are transmitted to the PC 1 60 of the volume- 
sales store 16, along with the information required for 
the Internet connection, including a DNS server address 

20 and an access point. 

[0090] On the basis of the information transmitted 
from the server 21 0 of the provider, the PC 1 60 of the 
volume-sales store 1 6 generates Internet con nection in- 
formation 150 of predetermined format The Internet 

25 connection information include a user ID, a user pass- 
word, a mail password, a DNS server address, and an 
access point. The Internet connection information 150 
are encoded according to a predetermined algorism by 
use of a media key, which will be described below. When 

30 the operation for writing the encoded inf ormation in the 
memory 4 of the memory card M inserted in the card slot 
of the PC 160 has been started, a message 206 is dis- 
played, indicating that information are being written. 
[0091] When information are written in the memory 4 

35 of the memory card M, the certification according to the 
fourth embodiment is executed. When the memory cer- 
tification is "OK", the PC 11 (i.e., an external apparatus) 
can be certified by using the certification key stored in 
the memory 3b of the memory card M. When these cer- 

^0 tifications are "OK", the write operation is started. 
[0092] After writing the Internet connection informa- 
tion 150 in the memory 4 of the memory card M, the PC 
160 displays an inquiry message 207, asking the user 
whether or not to protect the information in the memory 

45 card M by use of a password. 

[0093] If the protection based on a password is asked 
for, the PC 160 prompts the user to designate a pass- 
word. Then, the PC 160 encodes the password desig- 
nated by the user in accordance with a predetermined 

so algorithm, and stores it in the memory card M. This en- 
coded password is used as a key for taking out a media 
key from the memory card M. By writing the password 
in the memory card M, the PC 160 completes a series 
of operations for writing the Internet connection informe- 
rs tlon, I.e., the user registration processing. Thereafter, 
the PC 1 60 displays a message 208 indicating the com- 
pletion of user registration, and notifies a contract count 
server 21 1 of the completion of user registration through 
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the Internet, as indicated by arrow c. The contract count 
server 21 1 is owned by the business proprietor that de- 
veloped the present system (i.e., the system providing 
company). On the other hand, if the protection based on 
a password is not asked for, the PC 160 immediately 
displays the user registration completion message 208 
and notifies the contract count server 211 of the user 
registration completion, as indicated by arrow c. The no- 
tification of the contract count server includes the trans- 
mission of the information regarding the provider with 
which the user made a contract. 
[0094] The contract count server 21 1 stores the data 
on the number of users (subscribers) who made a con- 
tract with Internet providers, and the number of users is 
counted according to the providers or the Internet con- 
nection information registration service shops. Each 
time a notice of user registration completion Is received 
from the PC 1 60 of the volume-sales shop 1 6, the con- 
tract count server 21 1 increases the number of subscrib- 
ers to a provider by one, and the volume-sales shop 1 6 
(i.e., the shop that performed the service of registering 
the Internet connection information for the connection 
to that provider) increases the number of subscribers by 
one. 

[0095] As described above, data used as a key is writ- 
ten in an area of a memory, so as to prevent the fabri- 
cation of a counterfeit memory card. The memory con- 
trol LSI certifies the key data, and access to the memory 
is allowed only when coincidence is detected. 
[0096] Even If the memory of the memory card is re- 
placed with a memory of greater storage capacity, the 
certification by the memory control LSI does not indicate 
coincidence, and access to the memory is therefore pre- 
vented. 

[0097] To prevent analysis, the key data in the mem- 
ory can be encoded. 

[0098] The present invention relates to a memory 
card comprising: a memory for storing data; a control 
section for controlling the storing of data in the memory 
or controlling the reproduction of the data from the mem- 
ory; and a memory control LSI including an internal 
memory used by the control section. The control section 
compares the certification key stored In the memory with 
the certification key stored in the internal memory, and 
determines coincidence or non -co Incidence. Based on 
this determination, the memory is certified. 



Claims 

1. A portable electronic medium characterized by 

comprising: 

a base board (2) on which wiring is provided; 
a first memory (4), installed on the base board 
(2), for storing data and a first certification key; 
and 

a control circuit (3) including: a second memory 



(3b) for storing data and a second certification 
key; and a control section (3a) for controlling an 
operation of storing data in the first memory (4) 
and an operation of reading the data from the 
5 first memory (4), said second memory (3b) and 

said control section (3) being fabricated as a 
chip which is installed on the base board (2) and 
connected to the base board (2), 

10 said control section (3a) checking whether the 

first certification key stored in the first memory (4) 
coincides with the second certification key stored in 
the second memory (3b), thereby determining 
whether or not the first memory (4) is an intended 

is one. 

2. A portable electronic medium according to claim 1 , 
characterized in that: 

20 said first memory (4) is installed on the base 

board (2) by soldering; and 
said second memory (3b) is a bare chip in- 
stalled on the base board (2). 

25 3. A portable electronic medium according to claim 1 , 
characterized in that said first and second mem- 
ories (4, 3b) store the second certification keys in 
an unalterable manner. 

30 4. A portable electronic medium according to claim 1 , 
characterized in that said first and second mem- 
ories (4, 3b) include ROM portions, respectively, 
and the certification keys are stored in the ROM por- 
tions. 

35 

5. A portable electronic medium according to claim 1 , 
characterized in that: 

said first memory (4) and said control circuit (3) 
40 are installed on one surface of the base board 

(2); and 

an external connection terminal, coated with a 
hard gold layer, is provided on another surface 
of the base board (2). 

45 

6. A portable electronic medium according to claim 1 , 
characterized in that said second memory (3b) 
stores a control program for controlling the control 
section (3a). 

so 

7. A portable electronic medium characterized by 

comprising: 

a base board (2) on which wiring is provided; 
55 a first memory (4), installed on the base board 

(2), for storing data; and 
a control circuit (3) including: a second memory 
(3b) for storing data and a first-memory-state 
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information; and a control section (3a) for con- 
trolling an operation of storing data in the first 
memory (4) and an operation of reading the da- 
ta from the first memory (4), said second mem- 
ory (3b) and said control section (3a) being fab- 
ricated as a chip which is installed on the base 
board (2) and connected to the base board (2), 

said control section (3a) checking whether the 
first memory (4) is in a state coinciding with first- 
memory-state information stored in the second 
memory (3b), thereby determining whether or not 
the first memory (4) is an intended one. 

8. A portable electronic medium according to claim 7, 
characterized in that: 

said first memory (4) is installed on the base 
board (2) by soldering; and 

said second memory (3b) is a bare chip in- 
stalled on the base board (2). 

9. A portable electronic medium according to claim 7, 
characterized In that said first and second mem- 
ories (4, 3b) are nonvolatile memories. 

10. A portable electronic medium according to claim 7 t 
characterized in that said first memory (4) Is a non- 
volatile memory, and said second memory (3b) in- 
cludes a nonvolatile memory portion in which the 
first-memory-state information are stored. 

11. A portable electronic medium according to claim 7, 
characterized in that: 

said first memory (4) and said control circuit (3) 
are installed on one surface of the base board 
(2); and 

an external connection terminal, coated with a 
hard gold layer, is provided on another surface 
of the base board (2). 

12. A portable electronic medium according to claim 7, 
characterized in that said second memory (3b) 
stores a control program for controlling the control 
section (3a). 

13. A portable electronic medium according to claim 7, 
characterized in that said first-memory-state infor- 
mation include at least one of: information indicating 
which area of the first memory (4) is used at last- 
time processing; a verification value used at the end 
of the last-time processing; and a verification value 
regarding entity of the first memory (4). 

1 4. A portable electronic medium according to claim 1 3, 
characterized In that said area of the first memory 
(4) is defined by a start address and a data length. 



15. A portable electronic medium characterized by 
comprising: 

a base board (2) on which wiling is provided; 

5 a first memory (4), installed on the base board 

(2), for storing data and encoded data obtained 
by encoding a first certification key; and 
a control circuit (3) including: a second memory 
(3b) for storing data, a second certification key, 

10 an encoding key, and a decoding program; and 

a control section (3a) for controlling an opera- 
tion of storing data in the first memory (4) and 
an operation of reproducing the data from the 
first memory (4), said second memory (3b) and 

is said control section (3a) being fabricated as a 

chip which is installed on the base board (2) and 
connected to the base board (2), 

said control section (3a) decoding the encod- 
20 ed data stored in the first memory (4) by use of the 
encoding key and decoding program stored in the 
second memory (3b), and further checking whether 
a resultant certification key coincides with the cer- 
tification key stored in the second memory (3b), 
25 thereby determining whether or not the first memory 
(4) is an intended one. 

16. A portable electronic medium according to claim 15, 
characterized In that: 

30 

said first memory (4) is installed on the base 
board (2) by soldering; and 
said second memory (3b) Is a bare chip in- 
stalled on the base board (2). 

35 

17. A portable electronic medium according to claim 15, 
characterized In that said first and second mem- 
ories (4, 3b) are nonvolatile memories. 

40 18. Aportableelectronicmediumaccordingtoctaim15, 
characterized in that said first and second mem- 
ories (4, 3b) Include nonvolatile memory portions, 
the nonvolatile memory portion of the first memory 
(4) stores said encoded data, and the nonvolatile 

45 memory portion of the second memory (3b) stores 
said certification key, said encoding key, and said 
decoding program. 

1 9. A portable electronic medium accordi ng to claim 1 5 , 
so characterized in that: 

said first memory (4) and said control circuit (3) 
are installed on one surface of the base board 
(2); and 

55 an external connection terminal, coated with a 

hard gold layer, is provided on another surface 
of the base board (2). 
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20. A portable electronic medium according to claim 1 5, 
characterized in that said second memory (4, 3b) 
stores a control program for controlling the control 
section (3a). 
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